Practice question 39 of 498 · medium
An inventory agent is intended to read stock counts, but its API credential can also delete inventory records. Which change most directly implements AI-4?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Restrict the agent tool and downstream identity to the required read operations
Independent tool and identity permissions enforce read-only scope. System instructions, logging, and output filtering do not remove the granted destructive API authority.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.